<body>
  <script>
    Object.getPrototypeOf(document).changeFromSandboxedIframe = "change from sandboxed iframe";
  </script>
</body>
